Vaultwarden - Revision history

Auscyber: add semicolon

2025-12-16T06:45:15Z

add semicolon

← Older revision		Revision as of 06:45, 16 December 2025
Line 8:		Line 8:
	# in order to avoid having ADMIN_TOKEN in the nix store it can be also set with the help of an environment file		# in order to avoid having ADMIN_TOKEN in the nix store it can be also set with the help of an environment file
	# be aware that this file must be created by hand (or via secrets management like sops)		# be aware that this file must be created by hand (or via secrets management like sops)
	environmentFile = "/var/lib/vaultwarden/vaultwarden.env"		environmentFile = "/var/lib/vaultwarden/vaultwarden.env";
	config = {		config = {
	# Refer to https://github.com/dani-garcia/vaultwarden/blob/main/.env.template		# Refer to https://github.com/dani-garcia/vaultwarden/blob/main/.env.template

ItsJulz25: backup folder in the /var/lib/vaultwarden directory would reference itself and is therefore not allowed

2025-10-22T13:28:07Z

backup folder in the /var/lib/vaultwarden directory would reference itself and is therefore not allowed

← Older revision		Revision as of 13:28, 22 October 2025
Line 5:		Line 5:
	services.vaultwarden = {		services.vaultwarden = {
	enable = true;		enable = true;
	backupDir = "/var/~~lib~~/vaultwarden/backup";		backupDir = "/var/local/vaultwarden/backup";
	# in order to avoid having ADMIN_TOKEN in the nix store it can be also set with the help of an environment file		# in order to avoid having ADMIN_TOKEN in the nix store it can be also set with the help of an environment file
	# be aware that this file must be created by hand (or via secrets management like sops)		# be aware that this file must be created by hand (or via secrets management like sops)

Klinger: Category:Rust

2025-08-17T13:37:43Z

Category:Rust

← Older revision		Revision as of 13:37, 17 August 2025
Line 56:		Line 56:
	[[Category:Server]]		[[Category:Server]]
	[[Category:Security]]		[[Category:Security]]
			[[Category:Rust]]

Makefu at 08:24, 8 August 2025

2025-08-08T08:24:57Z

← Older revision		Revision as of 08:24, 8 August 2025
Line 6:		Line 6:
	enable = true;		enable = true;
	backupDir = "/var/lib/vaultwarden/backup";		backupDir = "/var/lib/vaultwarden/backup";
			# in order to avoid having ADMIN_TOKEN in the nix store it can be also set with the help of an environment file
			# be aware that this file must be created by hand (or via secrets management like sops)
			environmentFile = "/var/lib/vaultwarden/vaultwarden.env"
	config = {		config = {
	# Refer to https://github.com/dani-garcia/vaultwarden/blob/main/.env.template		# Refer to https://github.com/dani-garcia/vaultwarden/blob/main/.env.template
	DOMAIN = "https://bitwarden.example.com";		DOMAIN = "https://bitwarden.example.com";
	SIGNUPS_ALLOWED = false;		SIGNUPS_ALLOWED = false;
	~~# Needed to enable admin page and signups set ADMIN_TOKEN~~
	~~environmentFile = "/var/lib/vaultwarden/vaultwarden.env"~~

	ROCKET_ADDRESS = "127.0.0.1";		ROCKET_ADDRESS = "127.0.0.1";
	ROCKET_PORT = 8222;		ROCKET_PORT = 8222;

Death916: added environmentfile variable as its needed for admin page and account setup.

2025-08-08T07:00:20Z

added environmentfile variable as its needed for admin page and account setup.

← Older revision		Revision as of 07:00, 8 August 2025
Line 2:		Line 2:

	== Example Configuration ==		== Example Configuration ==
	<~~syntaxHighlight~~ lang=nix>		<syntaxhighlight lang="nix">
	services.vaultwarden = {		services.vaultwarden = {
	enable = true;		enable = true;
Line 10:		Line 10:
	DOMAIN = "https://bitwarden.example.com";		DOMAIN = "https://bitwarden.example.com";
	SIGNUPS_ALLOWED = false;		SIGNUPS_ALLOWED = false;
			# Needed to enable admin page and signups set ADMIN_TOKEN
			environmentFile = "/var/lib/vaultwarden/vaultwarden.env"

	ROCKET_ADDRESS = "127.0.0.1";		ROCKET_ADDRESS = "127.0.0.1";
Line 27:		Line 29:
	};		};
	};		};
	</~~syntaxHighlight~~>		</syntaxhighlight>

	== Reverse Proxy Setup (recommended) ==		== Reverse Proxy Setup (recommended) ==

StrangeGirlMurph2: fixed caddy syntax

2025-08-02T09:10:09Z

fixed caddy syntax

← Older revision		Revision as of 09:10, 2 August 2025
Line 31:		Line 31:
	== Reverse Proxy Setup (recommended) ==		== Reverse Proxy Setup (recommended) ==
	=== Caddy ===		=== Caddy ===
	<~~syntaxHighlight~~ lang=nix>		<syntaxhighlight lang="nix">services.caddy.virtualHosts."bitwarden.example.com".extraConfig = ''
	services.caddy.virtualHosts."bitwarden.example.com".extraConfig = ''
	encode zstd gzip		encode zstd gzip

	reverse_proxy :${toString config.services.vaultwarden.config.ROCKET_PORT}		reverse_proxy :${toString config.services.vaultwarden.config.ROCKET_PORT} {
			header_up X-Real-IP {remote_host}
	header_up X-Real-IP {remote_host}		}
	'';		'';</syntaxhighlight>
	</~~syntaxHighlight~~>
	=== Nginx ===		=== Nginx ===
	<syntaxHighlight lang=nix>		<syntaxHighlight lang=nix>

Anders130: Vaultwarden – A self-hosted Bitwarden-compatible password manager server written in Rust, available as a NixOS module.

2025-07-30T13:21:48Z

Vaultwarden – A self-hosted Bitwarden-compatible password manager server written in Rust, available as a NixOS module.

New page

[https://github.com/dani-garcia/vaultwarden Vaultwarden] is an alternative server implementation of the Bitwarden Client API, written in [[Rust]] and compatible with [https://bitwarden.com/download/ official Bitwarden clients], allowing you to self-host your own password manager backend.

== Example Configuration ==
<syntaxHighlight lang=nix>
services.vaultwarden = {
enable = true;
backupDir = "/var/lib/vaultwarden/backup";
config = {
# Refer to https://github.com/dani-garcia/vaultwarden/blob/main/.env.template
DOMAIN = "https://bitwarden.example.com";
SIGNUPS_ALLOWED = false;

ROCKET_ADDRESS = "127.0.0.1";
ROCKET_PORT = 8222;
ROCKET_LOG = "critical";

# This example assumes a mailserver running on localhost,
# thus without transport encryption.
# If you use an external mail server, follow:
# https://github.com/dani-garcia/vaultwarden/wiki/SMTP-configuration
SMTP_HOST = "127.0.0.1";
SMTP_PORT = 25;
SMTP_SSL = false;

SMTP_FROM = "admin@bitwarden.example.com";
SMTP_FROM_NAME = "example.com Bitwarden server";
};
};
</syntaxHighlight>

== Reverse Proxy Setup (recommended) ==
=== Caddy ===
<syntaxHighlight lang=nix>
services.caddy.virtualHosts."bitwarden.example.com".extraConfig = ''
encode zstd gzip

reverse_proxy :${toString config.services.vaultwarden.config.ROCKET_PORT}

header_up X-Real-IP {remote_host}
'';
</syntaxHighlight>
=== Nginx ===
<syntaxHighlight lang=nix>
services.nginx.virtualHosts."bitwarden.example.com" = {
enableACME = true;
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:${toString config.services.vaultwarden.config.ROCKET_PORT}";
};
};
'';
</syntaxHighlight>

[[Category:Server]]
[[Category:Security]]